The North Texas Chapter is proud to be recognized as not only the Best Very Large Chapter in North America, but also the Best Very Large Chapter Worldwide!.  At the June meeting, ISACA will be presenting these K. Wayne Snipes awards to the chapter. 

The K. Wayne Snipes Chapter Recognition Award, established in 1989, provides recognition to those chapters who meet or exceed special service goals by actively supporting local membership, and thus the IS audit and control profession. Criteria assessment is based on information submitted as part of the annual Chapter Annual Reports received by International Headquarters. Chapters must also submit their Balanced Scorecard Rating Grid and proof of an annual audit/verification/review in order to be included in the judging process.

Chapter performance is assessed on the following criteria:

• Chapter membership growth
• Member service projects
• Chapter-sponsored educational events
• Attendance at chapter meetings
• Involvement on association committees, or with association activities
• Involvement with other professional organizations
• Compliance with International Headquarters

ISACA congratulates the 2009 K. Wayne Snipes Award winners:

Wordwide Winners:

Small—New Orleans (USA)
Medium—Costa Rica
Large—Orange County (USA)
Very Large—North Texas (USA)

Regional Winners:

Asia Small—None Medium—Sri Lanka Large—Pune (India) Very Large—Mumbai (India)	Latin America Small—None Medium—Costa Rica Large—Bogotá (Colombia)	Europe/Africa Small—None Medium—Valencia (Spain) Large—Athens (Greece) Very Large—London (UK)
North America Small—New Orleans (Louisiana) Medium—Hudson Valley (New York) Large—Orange County (California) Very Large—North Texas (Texas)	Oceania None

Sue Pagel, CISA, CSOX Independent Consultant President - ISACA North Texas Chapter President@isacantx.org

The ISACA North Texas Chapter Board of Directors encourages corporate responsibility, and each year has specifically budgeted dollars to help another ISACA North American chapter in need of assistance. The Board performs due diligence to identify which chapters are most in need by performing the following specific activities:

1. Contact ISACA International representatives for specific chapter recommendations and feedback.
2. Review chapter web sites for program announcements and other published activities.
3. Determine if chapter officers recently participated in the semi-annual President Council Members (PCM) meetings, where best practices are exchanged.
4. Review chapter membership headcounts to evaluate recent member participation levels.
5. Discuss other issues directly with chapter officers.

For 2010, a Board committee comprised of Donna Hutcheson, Laurie Flandrau, Cheryl McKay-Dorrell and Rick Link recommended that a $3,000 check be provided to the following ISACA North American chapter:

Tulsa Chapter
Tulsa, Oklahoma
http://www.isaca-tulsa.org/

The Committee will contact the chapter's officers to provide support on how these funds can best be utilized to help grow and strengthen Tulsa's chapter meetings, training seminars, and hopefully their membership. Donna Hutcheson and Laurie Flandrau have volunteered to be the Board liaisons during this process.

Respectfully submitted,

Rick Link, CISA, CISSP, CISM Independent Consultant 1st Past President - ISACA North Texas Chapter

The word is getting out - that firms and recruiters can post their available audit and security-based openings on our JOBS Board, without charge. Help bring jobs and job seekers together by promoting job postings. Your fellow ISACA members will appreciate it.

Currently, we have three positions posted, as detailed below. See our website regularly for any updates and for complete details:

---

Company:  Ratliff Associates (Recruiter) Position:     Senior Public IT Auditor (permanent) Location:    North Dallas Salary:         $72K - $95K + Bonus                         (negotiable based upon experience, credentials                       and past earnings history) Contact:  Connie Ratliff     214.570.8483 connie@ratliffassociates.com

General:  The Senior Auditor will plan and conduct IT and Compliance audits for a diverse client base. This senior will function as a key knowledge holder on non-traditional audits (SAS70, SOX, IT Assessments, Internal Controls, etc.) and serve on traditional financial statement audit teams as skills permit.

Responsibilities: 

• Serve as primary auditor assigned to non-traditional audits including SAS’s, IT Assessments and Internal Controls Reviews
• Hold responsibility for full-cycle audits from planning through execution stages
• Work as part of a team, serving in lead or support roles as needed
• Maintain current knowledge of SOX, COBIT, and COSO guidelines
• Develop an open and positive relationship with outside clients, peers and executive management based on mutual trust and respect and a focus on common business objectives.
• Conduct Financial Statement Audits relating to P&L Balance Sheet Accounts, Inventory etc. OPTIONAL

Requirements:

• KEY REQUIREMENT is Compliance and IT audit skill set
• Minimum three years+ recent public audit experience required in a large local or regional or national firm
• Strong financial statement audit skills also important
• MS Office, CCH preferred.  IDEA a plus but not required.
• Excellent communication skills are required (both written and verbal)
• Highly Analytical and Organized

Travel:  Only 10% to 20%!! 

Education and Certifications: 

• Bachelors Degree required (Accounting, Finance or Business)
• Masters in Business Administration (MBA ) is a plus
• CISA or CISSP required.  CPA desired.

Other:  Candidates must be within commuting distance of North Dallas and be a US Citizen or Permanent Resident as no relocation or sponsorship assistance will be offered. 

Additional details and current job postings are available at:  ISACA North Texas Job Postings.

---

Company: JPS Health Network Position: Information Security Analyst Location: Ft. Worth, Texas Contact: Please apply online at http://www.jpshealthnet.org

General:  Support the Manager, Information Security in maintaining the confidentiality, availability, and integrity of the District’s information assets.

Duties: 

• Assist in the development of data security procedures for the Information Technology Department. Review and update applicable District policies to promote regulatory compliance and information security best practices.
• Assist with testing and updating the Information Technology Department’s disaster recovery plan. Coordinate monthly tests of backup media and document test results.
• Assist with ongoing information security risk assessments and network vulnerability scans.
• Participate in the Computer Security Event Response Team (CSERT) as required, in order to address data security breaches. Investigate other information security matters at the request of District management.
• Perform user access reviews of the District’s network and application environments. Document results and report to key stakeholders.
• Assist auditors, consultants, and other third parties with information security reviews and investigations. Activities may include coordinating document requests, arranging interviews with key stakeholders, and reporting results to District management.
• Participate in Information Technology project teams as needed, to address information security requirements for new or upgraded hardware and applications.
• Perform other tasks as directed by the Chief Information Officer, the Director of Information Technology, or their designees.

Requirements:

• Between 1 and 3 years work experience as a privacy-security compliance specialist, information security specialist, or information technology auditor. Experience in the health care industry is preferred.
• Knowledge of federal and state data security legislation including (but not limited to) HIPAA, PCI-DSS, and data breach notification laws is highly desirable.
• Familiarity with network architectures; Windows Active Directory; Windows-Linux server and desktop operating systems; IBM mainframes; Lawson and Siemens application suites is preferred.
• Knowledge of network vulnerability scanning tools including Qualys, Retina, and ISS is preferred.
• Familiarity with Microsoft Office products including Word, Excel, Access, and PowerPoint is preferred.
• Report writing skills are required. Must be able to summarize and communicate technical data to a non-technical audience.

Education and Certifications: 

• Bachelors degree from an accredited four-year college or university.
• CISA and/or CISSP are preferred.

ADA Essential Elements:

1. Security Policies (BCD)
   • Develop IT security policies and procedures.
   • Coordinate the development and ongoing maintenance of other IT policies and procedures.
   • Review draft documents from data custodians.
   • Ensure that all IT policies and procedures are compliant with regulatory requirements
     
     
2. Disaster Recovery (BCD)
   • Maintain the IT Disaster Recovery Plan including annual reviews.
   • Test the plan and update for major changes in hardware, applications, business and regulatory requirements.
   • Coordinate testing and reporting of data backup restorations in accordance with Key Performance Indicators (KPIs).
     
     
3. Risk Assessment / Incident Prevention (BCD)
   • Develop and implement an ongoing risk assessment program targeting information security and privacy matters.
   • Coordinate monthly infrastructure vulnerability scans; document scan issues and corrective actions.
   • Ensure that corrective actions are implemented.
     
     
4. Incident Response (BCD)
   • Assist the Computer Security Incident Response Team (CSIRT) to address actual (or alleged) data security breaches.
   • Gather data; document issues and corrective actions.
   • Ensure that corrective actions are implemented.
     
     
5. Audits and Reviews (BCD)
   • Perform application and system user access reviews, including documentation of issues and oversight of corrective actions.
   • Serve as liaison to auditors, consultants, and the District Compliance Committee regarding documentation of information security compliance initiatives.
   • Communicate audit and review results to appropriate parties; ensure that issues are addressed and corrective actions are implemented.

6. Projects and Initiatives (BCD)
   • Participate in IT projects and initiatives as directed by the Chief Information Officer, the Director of Information Technology, and their designees.

Other:  Essential elements are those duties which must be performed to accomplish the job. The following statements are descriptors of essential elements:

• The position exists to perform the function.
• Only a limited number of employees are available who can perform the function.he function is highly specialized and the person in the position is hired for special expertise or ability to perform it.
• There are serious consequences if this function is not performed.

Additional details and current job postings are available at:  ISACA North Texas Job Postings.

---

Company: Contineo Position:    IT Auditor/Consultant Location:    Ft. Worth, Texas Contact:     Chris Wetzel (cwetzel@contineotech.com)www.contineotech.com

General:  Contineo is a Professional Services Corporation specializing in compliance auditing, consulting, information technology and managed services. We provide solutions to companies in various industries across the U.S., including finance/banking, health care, law, high-tech and real estate. The qualified candidate is an audit and/or IT professional with financial and/or healthcare industry knowledge and who possesses a combination of consulting, audit, risk analysis, and project planning experience. Strong communication and documentation skills will be required to successfully perform in this rewarding position. This position reports to the Vice President.

Duties: 

• Conduct audits and compliance assurance tests (including but not limited to ACH, IT, Information Security, and SAS No. 70)
• Provide risk analysis and recommend risk mitigation strategies to senior management of client organizations
• Prepare and present audit reports to senior managers and directors of client organizations
• Conduct vulnerability assessments for networks, systems, and applications
• Review information security reports and event logs as part of forensic analysis in the event of an attack on client systems
• Develop strategic and tactical plans aligning with client requirements for information security, disaster recovery and business continuity, compliance, new product delivery, strategic growth, and operational efficiency
• Provide general administrative, sales and client support assistance, as required

Requirements:

• Minimum 2 years audit, or 3 years IT consulting, experience required
• Minimum 2 years financial industry (bank/credit union) experience preferred
• Strategic and tactical information security and IT planning skills, including solution development and vendor evaluation/selection
• Understanding of and experience with federal regulations such as NACHA Operating Rules, GLBA, Sarbanes-Oxley, and HIPAA
• Must possess excellent verbal and written communications skills
• Conceptual knowledge of TCP/IP networking, firewall, intrusion detection system (IDS), virtual private networking (VPN), and virus protection technologies
• General knowledge of LAN/WAN internetworking technology, including network protocols and operating systems
• Knowledge of Vulnerability Assessment and Penetration Testing tools is a plus
• Must be positive, team-oriented, self-directed and self-motivated

Travel:  50-60% required

Education and Certifications: 

• CISA, CISM or CISSP credentials; or able and willing to obtain certification within 18 months of hire

Benefits: 

• Medical, dental, life and disability insurance
• Simple IRA program
• Paid time off and holidays

Other:  Anticipated start date is July/August 2010. 

Additional details and current job postings are available at:  ISACA NTC Job Postings.

---

Now, let's get more jobs posted. This is a win-win for all concerned employers, recruiters, job candidates and our ISACA chapter.

To post an available position, just complete a Job Posting Template and e-mail it to jobs@isacantx.org. Each job posting will be displayed on our site for one month, but can be reposted again or removed at any time by request.

All posted job descriptions will also be included in this newsletter each month .Members can also examine the available positions on the ISACANTX.ORG job board at http://www.isacantx.org/index.cfm/Job_Postings.

Don't forget - Postings are FREE!

Our thanks to Shirley Walker of our newsletter team for extracting and formatting these positions for inclusion in the newsletter.

Bryan Plantes Deloitte & Touche Jobs Coordinator - ISACA North Texas Chapter jobs@isacantx.org

Interested in positions outside the DFW area, even world-wide? ISACA International maintains a Career Centre that hosts hundreds of available opportunities. Just select Career Centre from the left-hand menu options at www.isaca.org.

Following each monthly luncheon meeting, we give away four $50 gift cards to popular merchants in the area, typically Home Depot, Lowe's, Macy's, Nordstrom and/or Best Buy.

May's winners are shown below. The next winner, at our September 2010 meeting, could be you!

May 2010 Chris Jordan - Alan Tisser - Duaine Styles - Carol Barke

To be eligible for the drawing, you must have checked in and paid at the registration table prior to the luncheon and be present at the time of the drawing. Walk-in's who have paid and registered are also included in the drawing. Our luncheon speaker typically draws the names from the basket to ensure objectivity, and the lucky winners are subsequently photographed for posterity.

Tracy Carter, CISA, CSM, ASM Raytheon Hospitality Coordinator - ISACA North Texas Chapter hospitality@isacantx.org

Notice of continuing professional education (CPE) policy change for CISAs, CISMs, CGEITs and CRISCs

To recognize the long standing commitment to their careers and chosen professions, ISACA certified professionals who apply and are approved for Retired Status will be issued a certificate of appreciation. In addition, their certification will permanently remain in Retired Status, if they meet all of the following parameters:

• 55 years of age or older
• Permanently retired from the profession covered by their certification(s) or unable to perform their duties by reason of permanent disability
• Have held the relevant ISACA certification in good standing for at least 5 years.

Finally, payment of an annual certification maintenance renewal fee will be waived.

Please contact the ISACA Certification department at certification@isaca.org with any questions about this change.

ISACA thanks you for your continued dedication and commitment to the ISACA certification programs.

---

Certified in Risk and Information Systems Control (CRISC)

CRISC™ (pronounced “see-risk”) is the newest certification being offered by ISACA. The certification was designed for IT and business professionals who identify and manage risks through the development, implementation and maintenance of appropriate information systems controls.

Testing begins in the second half of 2011, but for professionals with at least eight years of relevant experience, a grandfathering program his been initiated that enables one to apply for the CRISC certification without taking the exam. The grandfathering option will remain open for one year, until April 2011. Additional information is available at www.isaca.org/crisc.

---

---